---
  - hosts: all
    roles:
      - { role: mgrote.restic, tags: "restic", when: "not 'tor' in group_names" }